Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
pgAdmin 4 vulnerable to directory traversal
configobj ReDoS exploitable by developer using values in a server-side configuration file
Kiwi TCMS Stored Cross-site Scripting via SVG file
Apache Airflow Spark Provider vulnerable to improper input validation
TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
tripleo-ansible may disclose important configuration details from an OpenStack deployment
tripleo-ansible may disclose important configuration details from an OpenStack deployment
Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions
Saleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions
Cross-site Scripting in django-ajax-utilities
Open redirect in web2py
Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
openstack-neutron uncontrolled resource consumption flaw
Vulnerable OpenSSL included in cryptography wheels
Improper Restriction of Excessive Authentication Attempts in modoboa
Denial of service vulnerability on Password reset page
Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information
Path traversal in spotipy
OpenStack Swift XML external entities (XXE) Injection
Improper Input Validation in pyload-ng
Cross-site Scripting in pyload-ng
Path traversal in binwalk
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.